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Listing and Amendments to the Claims 

This listing of claims will replace the claims that were published in the PCT 
Application and annexed to the International Preliminary Report on Patentability: 

1 . (currently amended) A method for providing a secure communications 
session with a user terminal in a communications network, the method comprising the 
steps of: 

transmitting a secure key and a secure seed to the user terminal using a secure 
communications method, the secure key and the secure seed being suitable for storage 
in the user terminal for use during the secure communications session; 

encrypting and transmitting data to the user terminal using a current session 
key, and receiving and decrypting data received from the user terminal using the 
current session key, the secure key initially being used as the current session key; and 

periodically generating by an access point (AP) a subsequent session key using 
the secure seed and using the subsequent session key as the current session key during 
subsequent communications between the communications network and the user 
terminal. 

2. (original) The method according to claim 1, further comprising the step of: 
logging off the user terminal in response to an encrypted logoff request from 

the user terminal accompanied by the secure seed. 

3. (original) The method according to claim 1, wherein the periodically 
generating step comprises generating the subsequent session key by concatenating the 
current session key with the secure seed and applying a hash algorithm. 

4. (currently amended) A method for providing a secure communications 
session with a mobile terminal in a wireless local area network (WLAN) , the method 
comprising the steps of: 

transmitting a secure key and a secure seed to the mobile terminal using a 
secure communications method, the secure key and the secure seed being suitable for 
storage in the mobile terminal for use during the secure communications session; 
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encrypting and transmitting data to the mobile terminal using a current session 
key, and receiving and decrypting data received from the mobile terminal using the 
current session key, the secure key initially being used as the current session key; and 

periodically generating by an access point (AP) a subsequent session key using 
the secure seed and using the subsequent session key as the current session key during 
subsequent communications with the mobile terminal. 

5. (original) The method as in claim 4, wherein the periodically generating step 
comprises generating by the AP a subsequent session key using a combination of a 
new key and the secure seed, the new key being generated using the secure key. 

6. (original) The method as in claim 5, wherein the periodically generating step 
comprises generating by the AP a subsequent session key by concatenating the new 
key and the secure seed and running a hash algorithm to generate the subsequent 
session key. 

7. (currently amended) A method for providing a secure communications 
session with a mobile terminal in a wireless local area network (WLAN) , the method 
comprising the steps of: 

generating a secure key; 

transmitting the secure key to the mobile terminal using a secure 
communications method, the secure key being stored in the mobile terminal for use 
during the secure communications session; 

encrypting and transmitting data to the mobile terminal using a current session 
key, and receiving and decrypting data received from the mobile terminal using the 
current session key; and 

ending the secure communications session by an access point (AP) in response 
to receiving a logoff message from the mobile terminal, the logoff message being in 
encrypted form and including the secure key. 
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8. (currently amended) A method for providing a secure communications 
session with a mobile terminal in a wireless local area network (WLAN) , the method 
comprising the steps of: 

generating a secure key and a secure seed; 

transmitting the secure key and the secure seed to the WLAN using a secure 
communications method, the secure key and the secure seed being stored in the 
WLAN for use during the secure communications session; 

encrypting and transmitting data to the WLAN using a current session key, 
and receiving and decrypting data received from the WLAN using the current session 
key, the secure key initially being used as the current session key; and 

periodically generating by the mobile terminal a subsequent session key using 
the secure seed and using the subsequent session key as the current session key during 
subsequent communications with the WLAN. 

9. (original) The method as in claim 8, wherein the periodically generating step 
comprises generating by the mobile terminal a subsequent session key using a 
combination of a new key and the secure seed, the new key being generated using the 
secure key. 

10. (original) The method as in claim 9, wherein the periodically generating step 
comprises generating by the mobile terminal a subsequent session key by 
concatenating the new key and the secure seed and running a hash algorithm to 
generate the subsequent session key. 

1 1 . (currently amended) A method for providing a secure communications 
session with a mobile terminal in a wireless local area network (WLAN) , the method 
comprising the steps of: 

generating a secure key; 

receiving the secure key from the WLAN using a secure communications 
method, the secure key being stored in the WLAN for use during the secure 
communications session; 
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encrypting and transmitting data to the WLAN using a current session key, 

and receiving and decrypting data received from the WLAN using the current session 

key; and 

ending the secure communications session in response to receiving a logoff 
message from the WLAN, the logoff message being in encrypted form and including 
the secure key. 

12. (currently amended) A method for providing a secure communications 
session with a mobile terminal in a wireless local area network (WLAN) , the method 
comprising the steps of: 

installing at least two shared secrets on both the mobile terminal and the 
WLAN access point during the user authentication phase whereby a first secret is the 
initial session key and a second secret is utilized as secure seed to generate 
subsequent session keys. 

13. (original) The method as in claim 12, further comprising the step of 
generating a new key and encrypting the new key with the current session key and 
exchanging and the new key between the WLAN and the mobile terminal. 

14. (original) The method as in claim 12, further comprising the step of the 
WLAN and the mobile terminal generating a new session key employing the new 
session key and the secure seed. 

15. (original) The method as in claim 14, wherein generating the new session key 
generation comprises the step of concatenating the said new session key to the secure 
seed. 

16. (original) The method as in claim 15, further comprising the step of 
generating a new session key by applying a hash algorithm on said concatenated 
result. 

17. (original) The method as in claim 16, further comprising the step of using the 
said new session key in communications between the WLAN and mobile terminal. 
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18. (currently amended) A method for providing a secure communications 
session between a mobile terminal and a wireless local area network (WLAN) , the 
method comprising the steps of: 

a mobile terminal sending during session logoff an encrypted logoff request 
accompanied by the secure seed such that the secure seed appears in the logoff 
request. 

19. (currently amended) An access point for providing a secure communications 
session between a mobile terminal and a wireless local area network (WLAN) , 
comprising: 

a means for transmitting a secure key and a secure seed to the mobile terminal 
using a secure communications method; 

a means to encrypt data using the secure key; and 

a means to periodically generate a subsequent session key using the secure 

seed. 

20. (original) A terminal device for providing a secure communications session 
with a communications network, comprising: 

a means to receive a secure key and a secure seed and a means to store the 
secure key and the secure seed for use during the secure communications session; 

a means to receive data and a means to decrypt the data using a current session 
key during the secure communications session, the secure key being using initially as 
the current session key; and 

a means to generate a subsequent session key using the current session key and 
the secure seed, the subsequent session key thereafter being used as the current 
session key for subsequent communications. 

21. (currently amended) The terminal device according to claim 20, wherein the 
terminal device comprises a mobile terminal and the communications network 
comprises a wireless local area network (WLAN) . 
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22. (original) The access point according to claim 24, wherein the means to 
periodically generate a subsequent session key comprises a means to generate a 
subsequent session key using a combination of a new key and the secure seed, the 
new key being generated by means using the secure key. 

23. (original) The access point according to claim 24, wherein the means to 
periodically generate a subsequent session key comprises a means to generate a 
subsequent session key by concatenating a new key and the second secure seed and a 
means for running a hash algorithm to generate the subsequent session key. 

24. (currently amended) An access point (AP) for providing a secure 
communications session between a mobile terminal and a wireless local area network, 
comprising: 

a means to transmit a secure key and a secure seed and a means to store the 
secure key and the secure seed for use during the secure communications session; 

a means to encrypt data and a means to transmit data to the mobile terminal 
and a means to receive data and a means to decrypt the data from the mobile terminal 
using a current session key during the secure communications session, the secure key 
being using initially as the current session key; and 

a means to generate a subsequent session key using the current session key and 
the secure seed, the subsequent session key thereafter being used as the current 
session key for subsequent communications. 
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